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CLAIMS 



[Claim (s)] 

[Claim l]The circuit arranged at at least one group realized by at least one 
layer of a semi-conductor substrate, In the semiconductor chip which at least one 
circuit group concerned is covered, and it is arranged, and connected with at 
least one of said circuits (1 2) electrically and which has at least .one 
conductive protective layer (SL) Said substrate has at least one protection 
sensor (SS) . This protection sensorit is formed so that this protection sensor 
may memorize a condition un-volatilizing . Said protection sensor (SS)The 
detection terminal connects with at least one of the aforementioned conductive 
protective layer (SL) or the aforementioned conductive protective layers. The 
output terminal of said protection sensor (SS)When it connects with at least one 
of said circuits (2) and non-volatilized level [ predetermined ] is impressed to 
the output side of a protection sensor by this, it is characterized by trying not 
to function as said circuit was decided. Semiconductor chip, 

[Claim 2] The protection sensor (SS) is formed of at least one transistor (Tl, T2) 
which has very thin gate oxide as compared with the transistor of said circuit. 
The gate terminal of said transistor (Tl, T2) is connected to said conductive 
layer (SL) . Semiconductor chip according to claim 1. 

[Claim 3] The protection sensor is formed as a non-volatile memory cell. This 
memory cellThe source field and drain field (10 11) which were formed in the both 
sides of the channel field of a semi-conductor substrate, The gate electrode 
which has been partially arranged above the channel field at least and which was 
insulated completely (12), It is formed with two control gate electrodes (14 15) 
arranged above this insulated-gate electrode (12) . One of said the control gate 
electrodes forms said detection terminal (15) , and another control gate electrode 

(14) and the diffusion field (10 11) are connected to the weighting network 

(AWS) . Semiconductor chip according to claim 1. 

[Claim 4] Said insulated-gate electrode (12) is precharged by forward or negative 
charge. Semiconductor chip according to claim 3. 

[Claim 5] By two or more protection sensors, a different insulated-gate electrode 
(12) is precharged with the separate charge. Semiconductor chip according to 
claim 4 . 

[Claim 61 At least one of said circuits has at least one detector (KOM) . This 
detector is connected to the output terminal of a protection sensor (SS) . 
Semiconductor chip given in any 1 term to claims 1-5. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

this invention covers and stations the circuit arranged into one group this 
semiconductor chip is realized by at least one layer of a semi-conductor 
substrate, and few, and such at least one circuit group about a semiconductor 
chip here having -- **** and these circuits -- it has at least the 
protective layer of one conductivity electrically connected [ inner ] to at least 
one . 
[0002] 

Such a semiconductor chip is well-known from EP 0378306A2. In the semiconductor 
chip indicated there, it is arranged to the field where the 2nd circuit group is 
not taken care of again to the field to which the 1st circuit group was taken 
care of. Protection of the 1st field is performed by the conductive layer with 
this well-known semiconductor chip, and this covers the 1st circuit group » s 
wiring side, and is arranged. This conductive layer is electrically connected to 
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the circuit group, and this circuit group's usual function is obtained only when 
there is no failure in a layer. 

[0003J 

Here, the 1st circuit group includes a microprocessor, and the circumference 
circuit of affiliation, for example, memory, and a transmission logical circuit. 
There may be information on a secret in this memory. This microprocessor may have 
the structure of a proper especially advantageous to the function relevant to 
insurance. Working detection of the circuit by the scanning electron microscope 
is avoided by the conductive layer by which it is always confirmed that there is 
no damage . 
[0004] 

However, it is able for insurance to remove the protective layer which has not 
covered the critical field to beforehand and after the event, and to form an 
alternative track in them. By this, though it is possible only under very 
complicated conditions now, the circuit at the time of actuation can be 
inspected . 
[0005] 

The semiconductor circuit which has a passivation layer is shown also in EP 
0169941A1, and this passivation layer protects the circuit part which is in the 
bottom of it as the equipotential surface here, a conductor with this active 
passivation layer it is included in insurance logic as a way, and by removing 
it for this reason, the function of a chip is barred and dynamic analysis becomes 
impossible. However, although the track function of a passivation layer is 
achieved, if a kind of bypass track which does not achieve a protection feature 
can be well established instead of the passivation layer of covering, in this 
well-known protection network, a semiconductor circuit will be again made active. 

[0006] 

Preparing the conductive protective layer set to EP 0300864A2 from two partial 
layers is indicated, and the capacitance of this partial layer is evaluated here. 
For this reason, although it cannot perform simply replacing one or these two 
partial layers according to another conductive structure, a safety practice may 
be avoidable by copying this capacitance according to another structure which a 
part of circuit [ at least ] exposed. Anyway, in order to inspect a semiconductor 
chip statically at least, it cannot become behind and cannot determine to remove 
a layer and to carry out a deposit again later. 
[0007] 

the one technique of removing a layer and carrying out the deposit of a new 
layer, for example, the bypass track, --a focused ion beam 

(FIB=focused-ion-beam) it is law. From the first, although this was developed 
for error removal and restructuring, the insurance of it is very dangerous to a 
critical semiconductor chip. 
[0008] 

Therefore, the technical problem of this invention is offering a safe 

semiconductor chip to an FIB operation. 

[0009] 

By claim 1, as for this technical problem, the substrate of a semiconductor chip 
has at least one protection sensor. Here this protection sensorit is formed so 
that this can memorize a condition un-volatilizing . This protection sensorit 
connects, it connects with at least one of a conductive protective layer or two 
or more conductive protective layers with a detection terminal having **** 

the output terminal of this protection sensor at least one of two or more 
circuits therebyWhen the level which is not volatilized [ predetermined ] is 
impressed to the output side of a protection sensor, it is solved by making it 
not function as the circuit was decided. 
[0010] 

This protection sensor can be advantageously used as the transistor which has 
very thin gate oxide as compared with the transistor of a circuit. However, it is 
also possible to use another component which operates as a safety device (fuse) , 
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for example, diode. It is important for the component which functions as a 
protection sensor that this can be changed into un-volatilizing with an 
electrical potential difference. 

[0011) ^ j: 

It is also that the removal and the re-deposit of a conductive layer which fortn 
not only being maintained after the condition of having not volatilized here and 
having memorized intercepts an electric supply electrical potential difference 
and newly re-impresses but connection are detected and recorded. Therefore, also 
when there is no failure in a layer, it can determine whether to be the no by 
which the attempt to whether it was removed by these points and it was made. 

That is, it was shown that the structure processed by the FIB method as charged 
electrically. The electrical potential difference formed of this is detected by 
the protection sensor, and is estimated by the component of one or more circuits. 
When a protection sensor is the transistor which has very thin gate oxide as 
compared with the transistor of a circuit, this gate oxide is destroyed by the 
ion beam with this electrical potential difference. This can be evaluated easily. 

[0013] ^. 
A protection sensor can be distributed to a semiconductor chip so that a f xeld 
may be covered by one side, and the number of sensors comes out only and is 
enough on the other hand. 

[0014] 

The advantage of this invention is that removal of a protective layer must, have 
been especially performed in connection with the bypass track which becomes 
behind and carries out a deposit (when existence of a protective layer is 
checked) . It is because actuation is impossible even if this protection sensor 
has already detected removal of a protective layer in it un-volatilizing, this 
circuit does not function, therefore there is a protective layer and there is 
nothing. It is important that actuation by the protective layer is memorized by 
un-volatilizing here, and by destruction of for example, a gate oxide, this is 
performed and can carry out things. 
[0015] 

With another gestalt of this invention, the protection sensor is constituted as a 
memory cell of a non-volatile, and this memory cell is formed with the drain 
diffusion field and source diffusion field which were formed in the both sides of 
the channel field of a semi-conductor substrate, the gate electrode wliich has 
been partially arranged above the channel field at least and which was insulated 
completely, and two control gate electrodes arranged above this gate electrode. 
One of these control gate electrodes foirms a detection terminal, and another 
control gate electrode and the diffusion field are connected to the weighting 
network . 
[0016] 

In this new non-volatile memory cell, the charge of the insulated gate into which 
an ion beam cannot flow with the electrical potential difference generated owing 
to changes. Through the 2nd control gate terminal and the terminal of a diffusion 
field, this condition of a memory cell of having changed can be read at any time, 
as a result can be detected. 
[0017] 

Advantageously, this insulated gate is precharged, and when a protection sensor 
is plurality here, these precharge is performed with a separate polarity and can 
detect actuation certainly by this. 
[0018] 

This invention is hereafter explained in detail using a drawing based on an 
example. Here Drawing 1 shows the example of a protective layer. Drawing 2 shows 
the basic circuit diagram of the example of a weighting network which has the 
protection sensor of this invention. Drawing 3 shows the top view of the 
protection sensor of this invention carried out as a non-volatile memory cell. 
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Drawing 4 shows the fundamental map of the weighting network connected to the 

non-volatile memory cell. 

[0019] 

Protective covering is shown to drawing 1 by the gestalt of the track which 
extends in the shape of [ which has two terminal points A and B ] a meander. This 
IS realized advantageously in the metal location (Metallage) of the topmost part 
of the manufacture process of the practice over a semiconductor circuit. These 
terminal points A and B penetrate and are in contact with the circuit side. 

[0020] 

These terminal points are the part, and as shown in drawing 2, they can be 
connected to a circuit. The signal generator GEN constituted by the sending set l 
in the semiconductor chip forms a signal, and in the example of illustration, 
this signal is supplied to the guard-wire way SL and the datum-line way RL, as 
shown m drawing 1 through amplifier VI and V2. The terminal point B of a 
protection network is connected to the gate terminal of two transistors Tl and T2 
which have a thin gate oxide layer connected as a CMOS inverter, and these 
transistors operate as a protection sensor SS here. The output side of the 
protection sensor SS is connected to one input side of Comparator KOM like the 
2nd terminal of the datum-line way RL, and the output signal of Comparator KOM 
shows whether there is [ the protection sensor SS ] any failure. The protection 
sensor SS and Comparator KOM form a receiving circuit 2 here 
[0021] 

When there is no failure in the protection sensor SS, the output side supplies 
the same signal as the datum-line way RL. However, if this protection sensor 
originates m the too high electrical potential difference by ion beam operation 
and IS destroyed, this output side will supply fixed logic 1 or logic 0, and this 
will be Identified by Comparator KOM. It is obtained from this output signal of 
Comparator KOM that a function as the original circuit realized by this 
semiconductor chip was decided to be it cannot be achieved any longer. 

[0022] 

The fundamental map of the non-volatile memory cell of this invention which has 
two control gate electrodes is shown to drawing 3 by the top view. The channel 
field which is not illustrated in detail between two diffusion fields 10 and 11 
which function as the drain and the source of a field-effect transistor is 
constituted so that it may be well-known. This field is covered with the 
subregion of the insulated-gate electrode 12 (the so-called floating gate) . The 
insulating layer between a channel field, and a source field or the drain field 
11 and the insulating layer between a channel field and the insulated-gate 
electrode 12 are especially thin in a small field, and form the tunnel aperture 
13 there. The 1st field of the insulated-gate electrode 12 is covered, the 1st 
control gate electrode 14 covers the 2nd field again, and the 2nd control gate 
electrode 15 is arranged. The diffusion fields 10 and 11 and the control gate 
electrodes 14 and 15 have Terminal A, A', B, B', or C, respectively. 

[0023] 

This new memory cell can be used instead of the transistor which has gate oxide 
with also advantageously thin drawing 2. In this case, the terminal C of this 
memory cell is connectable with the terminal B of the guard-wire way SL. The 
terminal B of a memory cell, the terminal A of the diffusion field of a memory 
cell, and A' are connected to the weighting network AWS in order to be used in 
order to precharge to an insulated-gate electrode, and to evaluate the charge 
condition of this insulated-gate electrode on the other hand. This is shown in 
drawing 4 . 
[0024] 

This precharge is performed with the advantageous operation gestalt of this 
invention by impressing the high program electrical potential difference of 16V 
during a test phase before shipment of a semiconductor chip between one of the 
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terminal B of the 1st control gate electrode 14 of an insulated-gate electrode, 
or the B', and the terminal A of the diffusion field 11. The predetermined 
initial voltage of a memory transistor arises by this charge. Therefore, this 
initial voltage is a scale over the charge of an insulated-gate electrode. An 
operation of FIB forms an electrical potential difference between the 2nd control 
gate electrode 15 and a channel field. The tunnel current which passes along the 
tunnel aperture 13 with this electrical potential difference occurs, as a result 
the charge of the insulated-gate electrode 12 changes. This change of a charge is 
detectable by asking for initial voltage with a weighting network AWS . This is 
performed by impressing the read-out electrical . potential difference which 
changes in itself to the 1st control gate electrode 14. The initial voltage which 
changed means that the charge of an insulated-gate electrode changed. 

[0025] 

Thus, if an FIB operation is held un-volatilizing, a defense mechanism suitable 
at the time of actuation next to this semiconductor chip can be started. 

[0026] 

Positive charge or negative charge may be precharged to the insulated-gate 
electrode 12, by two or more protection sensors, a different number and a 
different polar charge can be precharged, and this can raise the certainty of 
detection of an FIB operation. 
[0027] 

When a protective layer is used according to this invention in relation to a 
protection sensor, it is especially advantageous that a function as the 
semiconductor chip was decided depending on the bypass track on which this 
protection sensor memorizes ion beam inspection of a protective layer 
un-volatilizing, therefore it restores or ****s after this protective layer 
cannot arise any longer. 

[Brief Description of the Drawings] 

[Drawing 1] 

It is drawing showing the exan^le of a protective layer. 
[Drawing 2] 

It is the basic circuit diagram of the example of a weighting network which has 
the protection sensor of this invention. 
[Drawing 3] 

It is the top view of the protection sensor of this invention carried out as a 
non-volatile memory cell. 
[Drawing 4] 

It is the fundamental map of the weighting network connected to the non-volatile 
memory cell. 
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